<iframe src="//victim.example.com/repo/csp/sd/vue.php?inj=unsafe-eval%20required%20%3Cdiv%20id=app-4%3E%3Cscript%20type=application/ecmascript%3Ealert(1)%3C/script%3E%3C/div%3E"></iframe>
